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What Is Claimed Is : 

1, An agent-based distributed reasoning system for managing a computer 
network with a plurality of hosts, the system comprising: 

a plurality of interface agents running on the plurality of hosts, the 
plurality of interface agents assigned to resources within the computer network; 

a pluraHty of distributed case-based reasoning agents running on the 
plurality of hosts, wherein the plurality of distributed case-based reasoning agents 
is capable of accessing one or more case bases; and 

a plurality of response agents running on the plurality of hosts, 

wherein an interface agent in the plurality interface agents sends an 
input regarding an event in an assigned resource to an appropriate distributed case- 
based reasoning agent among the plurality of distributed case-based reasoning 
agents, 

wherein the appropriate distributed case-based reasoning agent, upon 
receiving the input, accesses the one or more case bases to select a response and 
communicates the response to an appropriate response agent in the plurality of 
response agents, and 

wherein the appropriate response agent implements the response to 
resolve the event. 
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2. The system of claim 1, wherein the resources in the computer network 
includes network management tools, network security tools, operating system 
specific features, and health tools. 

3. The system of claim 1, wherein the plurality of distributed case-based 
reasoning agents consider inputs regarding multiple resources sent by one or more 
of the plurality of interface agents. 

4. The system of claim 1, wherein the response includes invoking one or 

more cases in the one or more case bases. 

5. The system of claim 1, wherein the plurality of distributed case-based 
reasoning agents is capable of selecting a response when multiple cases in the one 
or more case bases match the input. 

6. The system of claim 5, wherein the plurality of distributed case-based 
reasoning agents uses a precedence order to select a response. 

7. The system of claim 6, wherein the precedence order is defined based 
on specificity and priority values. 
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8. The system of claim 5, wherein the plurality of distributed case-based 

reasoning agents uses response function call-switches to select a response. 

9. The system of claim 8, wherein the response function call-switches 
include active, always-fire, call-next, and timeout switches. 

10. The system of claim 5, wherein the plurality of distributed case-based 
reasoning agents uses a precedence order and response function call-switches to 
select the response. 

11. The system of claim 5, wherein the response includes invoking one or 
more cases in the one or more case bases. 

12. The system of claim 1, wherein the plurahty of cases includes case 
templates. 

13. The system of claim 12, wherein the case templates are used to 
represent an event , add a new case, or analyze historical events. 

14. The system of claim 1, wherein agents including the plurality of 
interface agents, the plurality of distributed case-based reasoning agents, and the 
plurality of response agents are independent. 
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15. The system of claim 1, wherein cases in the one or more case bases are 
adaptable. 

16. The system of claim 1, wherein a failing agent is replaced by another 

agent. 

17. A method for managing a computer network, the computer network 
^ having agent-based architecture with a plurality of agents, some of which are 

interface agents, distributed case-based reasoning agents, and response agents, the 
^ method comprising: 

^5 monitoring a resource in the computer network using an interface 

^ agent; 

p5 reporting, using the interface agent, an event in the resource to an 

appropriate distributed case-based reasoning agent; 

selecting a response using the appropriate distributed case-based 
10 reasoning agent; and 

implementing the response using an appropriate response agent, 
wherein the appropriate distributed case-based reasoning agent 
accesses one or more case bases in the selecting step. 

18. The method of claim 17, further comprising; 
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replacing a failing agent among the plurality of agents with another 

agent. 

19. The method of claim 17, further comprising, 
dynamically updating the one or more case bases. 

20. The method of claim 19, wherein the updating step uses a plurality of 
case templates. 

21. The method of claim 17, further comprising: 
representing an event using a case template, 

wherein the case template may be updated. 

22. The method of claim 17, further comprising: 

adding a new case to the one or more case bases using a case template. 

23. The method of claim 17, further comprising: 
analyzing historical data using a case template. 

24. The method of claim 23, wherein a result of the analyzing step may be 
used in the selecting step. 
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25. The method of claim 17, wherein the selecting step further comprises: 
resolving a conflict when multiple cases match the event. 

26. The method of claim 25, wherein the resolving step uses a precedence 

order. 

27. The method of claim 26, wherein the precedence order is determined 
based on specificity and priority values. 

28. The method of claim 25, wherein the resolving step uses response 
function call-switches. 

29. The method of claim 28, wherein the response function call-switches 
include active, always-fire, call-next, and timeout switches. 

30. The method of claim 25, wherein the resolving step uses a precedence 
order and response function call-switches. 

31. A system for managing a computer network, the computer network 
having agent-based architecture with a plurality of agents, some of which are 
interface agents, distributed case-based reasoning agents, and response agents, the 
system comprising: 
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means for monitoring a resource in the computer network using an 
interface agent; 

means for reporting, using the interface agent, an event in the resource 
to an appropriate distributed case-based reasoning agent; 

means for selecting a response using the appropriate distributed case- 
based reasoning agent by accessing one or more case bases; and 

means for implementing the response using an appropriate response 

agent. 

32. The system of claim 31, further comprising: 

means for surviving a failure without any service interruption. 

33. The system of claim 31, further comprising: 

means for replacing a faiUng agent among the plurahty of agents with 
another agent, 

34. The system of claim 31, further comprising: 

means for dynamically updating the one or more case bases. 

35. The system of claim 31, further comprising: 

means for resolving a conflict when multiple cases match the event. 
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36. A computer program product for managing a computer network, the 
computer network having agent-based architecture with a plurality of agents, some 
of which are interface agents, distributed case-based reasoning agents, and 
response agents, the computer program product comprising: 

computer readable program code configured to monitor a resource in 
the computer network using an interface agent; 

computer readable program code configured to report, using the 
interface agent, an event in the resource to an appropriate distributed case-based 
reasoning agent; 

computer readable program code configured to select a response using 
the appropriate distributed case-based reasoning agent by accessing one or more 
case bases; 

computer readable program code configured to implement the response 
using an appropriate response agent; and 

a computer readable medium in which the computer readable program 
codes are embodied. 
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